Skip to content
InYourGeek
visiteur@inyourgeek — shell
↹ compléter↑↓ historique⏎ ouvrirhelp
FR

The Monday letter · the tech and security week in one email

Free, every Monday, via Brevo (EU), one-click unsubscribe · your data and rights

Watch ·

Bulletin for Monday, October 12, 2026

Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.

+10breaches, in 8 sectors+7advisories, in 5 updates0actively exploited43Maccounts affected, as reported

Deal with these first

  • Critical · 14,268 accounts

    Alloextra

    These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.

  • Critical

    Armurerie du Bocage

    Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.

  • Critical

    Federal Bureau of Investigation (FBI)

    These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.

Today’s breaches 10

Retail3

Employment and HR1

Public sector1

Other1

Education1

Transport and travel1

Industry1

Energy1

Today’s advisories 7

  • github.com/0xJacky/Nginx-UIGo · CVSS 7.5 · 2 failles→ 1.9.10-0.20260901043436-8c9b9a1aff21
    go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260901043436-8c9b9a1aff21
    • CVE-2026-107805Denial of service · CVSS 7.5 · >= 1.9.10-0.20260729084040-acb59fdd81db, < 1.9.10-0.20260901043436-8c9b9a1aff21High
    • CVE-2026-107812Supply chain · CVSS 7.5 · >= 1.9.10-0.20250517140552-daee3ac7ade1, < 1.9.10-0.20260728114330-580585516dd8 · → 1.9.10-0.20260728114330-580585516dd8High
  • pyload-ngPyPI · CVSS 7.5 · 2 faillesvendor patch
  • code.vikunja.io/apiGo · CVSS 7.5vendor patch
  • github.com/jhaals/yopassGo · CVSS 7.5→ 0.0.0-20260727191436-61e31ead04a4
    go get github.com/jhaals/yopass@v0.0.0-20260727191436-61e31ead04a4
    • CVE-2026-107840Denial of service · CVSS 7.5 · < 0.0.0-20260727191436-61e31ead04a4High
  • github.com/luskaner/ageLANServer/serverGo · CVSS 7.5→ 1.8.2-0.20260809203301-1dd40166a593
    go get github.com/luskaner/ageLANServer/server@v1.8.2-0.20260809203301-1dd40166a593
    • CVE-2026-107839Denial of service · CVSS 7.5 · < 1.8.2-0.20260809203301-1dd40166a593High

The week in one email, every Monday

The week’s priorities, breaches, exploited flaws and articles, no ads. For day-by-day, this bulletin’s RSS feed.

One letter a week, on Monday. Your address is only used for this mailing: it is entrusted to Brevo (France, data in the EU), never sold, no advertising. Like any mailing tool, Brevo measures opens and clicks: InYourGeek only reads totals, never per-person statistics. Sign-up confirmed by email; one-click unsubscribe in every letter. Controller: SOULIER Sébastien EI — your data and your rights.

Bulletin RSS feed

An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.